//podcastplus.net/feed/real-cybersecurity~04408f7d The Real Cybersecurity Podcast decrypts the issues and business of technology security. But instead of just scaring you, these industry veterans provide real advice and analysis for organizations trying to make security real today. Hosted by Greg Young and Bill Malik. Thu, 27 Aug 2026 02:43:45 +0000 https://www.buzzsprout.com/806132/14148123-ep-73-breach-disclosure-laws-water-treatment-faraday-and-walking-around.mp3 Greg and Bill discuss how breach disclosure laws could play out while discussing the recent events around SUNBURST, water treatment as targets, and the critical CISO skill of just walking around and talking to people.  Thu, 14 Dec 2023 19:00:00 +0000 https://www.buzzsprout.com/806132/14148123-ep-73-breach-disclosure-laws-water-treatment-faraday-and-walking-around.mp3 https://www.buzzsprout.com/806132/8104270-episode-25-solarburst-commander-elon-supply-chain-attacks-and-hoodies.mp3?blob_id=36486072 Bill and Greg dissect parts of the SolarBurst and water filtration hacks, and Bill confirms that all criminals wear hoodies so Greg proposes banning hoodies. We cover the issues of Supply Chain security. Tue, 09 Mar 2021 12:00:00 +0000 https://www.buzzsprout.com/806132/8104270-episode-25-solarburst-commander-elon-supply-chain-attacks-and-hoodies.mp3?blob_id=36486072 https://www.buzzsprout.com/806132/7312999-episode-24-guest-brian-reed-talks-data-loss-prevention-dlp-and-working-at-gartner.mp3?blob_id=31825234 Brian Reed is proof that you can be smart, nice,  a great father, and successful in security. Brian is a long time Atlantan (the city in Georgia, not the underwater one) and has been doing security IBM, ISS, Gartner and Proofpoint. Brian talks about: - 2021 and the nexus between the upsides of DLP and the risks to privacy and surveillance if not done right. - Remote working and security. - Bill's dislike of open offices. - His experience at Gartner, overlapping with Bill and Greg. We each name the smartest non-security analyst at Gartner we worked with, and the security analyst we'd each want on an advisory day with us. - Cities we've been stuck in. Greg repeats his clown factory analogy. He repeats himself a lot. Bill and Brian talk about American football as an attempt to confuse Greg. He's on LinkedIn at https://www.linkedin.com/in/brianreed/ Fri, 15 Jan 2021 20:00:00 +0000 https://www.buzzsprout.com/806132/7312999-episode-24-guest-brian-reed-talks-data-loss-prevention-dlp-and-working-at-gartner.mp3?blob_id=31825234 https://www.buzzsprout.com/806132/7192888-episode-23-backdoors-5g-causes-security-security-clown-factories.mp3?blob_id=31113283 Bill shines a flashlight on the truth about 5G radiation, and shares his chicken recipes to demonstrate the difference in spiciness. We get seriousness about the security relationship between IoT and 5G and why they are so closely linked.  Bill says good things about Christopher Krebs. Greg explains that investors and products buyers look at security companies differently. Greg laments the greed-over-security  and clown factory theory of the Bay Area security scene. Greg and Bill agree that the Atlanta and Austin areas are great security scenes. Fri, 08 Jan 2021 15:00:00 +0000 https://www.buzzsprout.com/806132/7192888-episode-23-backdoors-5g-causes-security-security-clown-factories.mp3?blob_id=31113283 https://www.buzzsprout.com/806132/6342904-episode-22-interview-with-john-pescatore-of-sans.mp3?blob_id=26435734 Greg and Bill interview John Pescatore from SANS about what's going on in the whacky world of cybersecurity. We cover a lot of ground including the breadcrumbs that attackers leave, the history of SANS, what are the big topics in the SANS community, Zero Trust, supply chain security, 2FA - why isn't it standard?, bug bounty programs, and the idea for a Netflix reality series called "This Old Firewall". And how nasty online events are right now, and how to fix them. Thu, 12 Nov 2020 16:00:00 +0000 https://www.buzzsprout.com/806132/6342904-episode-22-interview-with-john-pescatore-of-sans.mp3?blob_id=26435734 https://www.buzzsprout.com/806132/5203876-episode-21-hacked-car-things-prezentationkraft-sanctioned-by-a-foreign-government.mp3?blob_id=20984857 Bill updates us on some recent threat and vulnerability reports. Greg thinks that all CIOs need an animatronic CISO hype-man, and that people would pay money to have sanctions against them announced by an evil foreign government. Our oddball segment of the day is what mugs we have on our desk. How we build and deliver a great security presentation, but we talk about when we bombed. Bill says Moby Dick, Moby, MOBI? And we can't hate Rob Lowe. Mon, 31 Aug 2020 12:00:00 +0000 https://www.buzzsprout.com/806132/5203876-episode-21-hacked-car-things-prezentationkraft-sanctioned-by-a-foreign-government.mp3?blob_id=20984857 https://www.buzzsprout.com/806132/4936004-episode-20-live-from-black-hat-election-security-is-easy-rogue-robots.mp3?blob_id=19712162 Live (virtually) from Black Hat we give an update on what is being focused on.  We agree that presenting without a live audience requires a different approach than live stage presentations. Bill reaches for smelling salts when  confronted with rogue industrial robots, and Greg thinks secure voting is easy.  Yes, really.  Mon, 10 Aug 2020 16:00:00 +0000 https://www.buzzsprout.com/806132/4936004-episode-20-live-from-black-hat-election-security-is-easy-rogue-robots.mp3?blob_id=19712162 https://www.buzzsprout.com/806132/4363991-episode-18-foundations-of-cloud-security-impacts-of-5g-and-cloud-garbage-collection.mp3?blob_id=17035256 We take a helicopter up a few thousand feet to suss out what cloud security is really about. What security problems does cloud fix?  What security problems does it introduce?  One hypothesis is that a lot of IT is unnecessarily 'custom', and so is the security with it.  The reality in the world is there is still a lot of on-premises IT, multi-cloud, and shadow IT today. Bill brings up the real issues of cloud resource garbage collection and the impacts of counters, and Greg shouts out 'object re-use!' and 'Y2K!' like a crazy person. Mon, 29 Jun 2020 15:00:00 +0000 https://www.buzzsprout.com/806132/4363991-episode-18-foundations-of-cloud-security-impacts-of-5g-and-cloud-garbage-collection.mp3?blob_id=17035256 https://www.buzzsprout.com/806132/4138685-episode-17-big-trouble-in-privacy-and-surveillance-and-the-cybersecurity-channel.mp3?blob_id=15951833 Current events are highlighting the nasty issues around privacy and broad surveillance.  As some companies announce they will no longer support certain applications of facial recognition we discuss the shift in privacy to being up to the individual.   We talk about "The Channel" during the week when Canalys releases their annual Global Cybersecurity Matrix.  No not TV channels, but the channel of partners that are how cybersecurity products get from the makers to the users. Thu, 11 Jun 2020 21:00:00 +0000 https://www.buzzsprout.com/806132/4138685-episode-17-big-trouble-in-privacy-and-surveillance-and-the-cybersecurity-channel.mp3?blob_id=15951833 https://www.buzzsprout.com/806132/4008926-episode-16-facebook-jail-cybersecurity-lies-why-you-don-t-have-to-speak-at-sec-cons.mp3?blob_id=15324989 We discuss the issues of dishonesty in cybersecurity marketing, that it's OK to not speak at security conferences, a bunch of non-traditional book references for cybersecurity, and our favorite conferences .  And Bill ends up in Facebook jail for crimes involving cat videos. Tue, 02 Jun 2020 12:00:00 +0000 https://www.buzzsprout.com/806132/4008926-episode-16-facebook-jail-cybersecurity-lies-why-you-don-t-have-to-speak-at-sec-cons.mp3?blob_id=15324989